Block one web profile accessing another?

Note: I am not a UTM firewall rule guy.  I've no idea if this would work.

Can you create a firewall rule.  Source is your Guest Network, Destination is your Corp network.  Service Web Surfing, and action Block.

The traffic is proxied before the firewall so fw rules won't come into effect here. Having no fw rules for web browsing will result in web traffic getting a default block if traffic ever got to it after the proxy.

So it's obviously:

1. Create tag for interesting traffic (url, domain, cidr etc) eg your corp domain

2. Apply that tag as a BLOCK on the filter that the above traffic hits eg Guest filter

And as an added precaution, don't let guest traffic use the DNS proxy on the UTM ie use an external dns

So it's obviously:

1. Create tag for interesting traffic (url, domain, cidr etc) eg your corp domain

2. Apply that tag as a BLOCK on the filter that the above traffic hits eg Guest filter

And as an added precaution, don't let guest traffic use the DNS proxy on the UTM ie use an external dns

Louis, you might be interested in a document I maintain that I make available to members of the UTM Community, "Configure HTTP Proxy for a Network of Guests."  If you would like me to send you this document, PM me your email address. For our German-speaking members, I also maintain a version auf Deutsch initially translated by fellow member hallowach when he and I did a major revision in 2013.

Cheers - Bob